@xeroapi/xero-mcp-server
MCP server implementation for Xero integration
No outside reports on file
This tool directly controls your accounting data, so treat it like giving someone your accounting login—only use it if you fully trust the AI system and understand you're responsible for any changes it makes.
Based on public adoption and transparency signals as of Oct 23, 2026. Our opinion, not a code audit or security guarantee.
What it can access
- Local filesNo local folder access notedLOW
- Command executionNo shell command runner notedLOW
- Network reachLocal or standard API callsLOW
- CredentialsRequires API key or tokenREVIEW
- Package sourcenpm (@xeroapi/xero-mcp-server)PUBLIC
Inferred from this listing’s public package details and description. Check the project’s source before installing.
Install
npx -y @xeroapi/xero-mcp-serverAbout @xeroapi/xero-mcp-server
This is an MCP server (a tool that lets AI assistants talk to other services) that connects to Xero, which is cloud accounting software. It lets an AI assistant read and possibly modify financial data like invoices, contacts, and accounts in Xero.
Who it’s for
Businesses or accountants who use Xero and want to let AI assistants help with accounting tasks. This is for people who understand both accounting software and AI tools.
Alternatives
- Zapier + Xero integration: Pre-built automation tool that connects Xero to other apps without requiring MCP.
- Xero native API: Direct integration by your accountant or developer without MCP layer.
- QuickBooks Online MCP: Similar connector for QuickBooks instead of Xero.
- Manual data entry + spreadsheets: No automation risk, but slower and more error-prone.
Setup
Check these steps against the project’s own instructions before running anything.
Follow the project's README. Typically you would install via npm and configure authentication credentials for your Xero account, then add it to your Claude Desktop mcpServers configuration.
Why this grade
Signal-based grade (4/7 points): listed in several sources, public source code. This reflects adoption and transparency, not a code review.
Popularity and upkeep
- Weekly npm downloads
- 64.3k
- Listing last refreshed
- 2026-10-29
These are public popularity signals, not a maintenance check. Look at the repository’s commit history and open issues.
Security reports
No reports found for this package in our research (last checked 2026-10-30).
Risks to watch for
- Financial data access: The tool can connect to real Xero accounts and potentially read or change invoices, payments, and account information that affects real money.
- Authentication secrets: Setting this up requires storing Xero API credentials (like access tokens), which could be stolen if your computer is compromised.
- Unintended modifications: The AI assistant could accidentally create, delete, or modify financial records if asked the wrong way or if the tool has write permissions.
- No visible activity log: Someone may not easily see what changes the tool made to your Xero account unless you check Xero's audit trail separately.
- Prompt injection: Attackers could craft fake invoices or data in Xero designed to trick the AI into doing something unintended.
How to lower the risk
Least-privilege permissions
- Give the tool read-only access to Xero if you don't need it to create or change records.
- Use Xero API permissions to limit which data (contacts, invoices, etc.) the tool can access.
Network isolation
- Run this on a trusted computer, not on shared or public machines.
- Don't expose the MCP server to the internet or untrusted networks.
Monitoring
- Regularly check your Xero audit logs to see what the tool changed.
- Review financial reports weekly to spot unexpected changes.
Red flags to watch for
- The tool suddenly making large transactions or deleting records.
- Weird invoices or contacts appearing in Xero that you didn't create.
- Error messages about authentication failures or permission issues.
Questions
How do I install @xeroapi/xero-mcp-server?
Run npx -y @xeroapi/xero-mcp-server in your terminal, or add the server entry to your claude_desktop_config.json or .cursor/mcp.json as shown in the Setup section on this page.
Are there security reports about @xeroapi/xero-mcp-server?
No reports found for this package in our research (last checked 2026-10-30). @xeroapi/xero-mcp-server currently holds Grade B (Some risk signals) based on public adoption and transparency signals. Key risk areas to watch include financial data access, authentication secrets, unintended modifications.
Is @xeroapi/xero-mcp-server actively maintained?
@xeroapi/xero-mcp-server has 64.3k weekly npm downloads, with its latest repository commit pushed on 2026-06-05. Our directory data was last refreshed on 2026-10-29. Check recent commit activity, release tags, and open issues before pinning it in production.
What are alternatives to @xeroapi/xero-mcp-server?
Notable alternatives to @xeroapi/xero-mcp-server include Zapier + Xero integration (Pre-built automation tool that connects Xero to other apps without requiring MCP), Xero native API (Direct integration by your accountant or developer without MCP layer), QuickBooks Online MCP (Similar connector for QuickBooks instead of Xero), Manual data entry + spreadsheets (No automation risk, but slower and more error-prone). You can also compare @xeroapi/xero-mcp-server side by side with other MCP servers in the Related tools section on this page.
README badge and team notes
Maintain or use @xeroapi/xero-mcp-server? Show its live grade in your GitHub README, docs site, or run a check from the terminal before you install.
GitHub README Markdown:
[](https://agentarmorhq.com/skills/xeroapi-xero-mcp-server)HTML embed:
<a href="https://agentarmorhq.com/skills/xeroapi-xero-mcp-server"><img src="https://agentarmorhq.com/api/badge/xeroapi-xero-mcp-server" alt="AgentArmorHQ Risk Grade for @xeroapi/xero-mcp-server" height="20" /></a>Terminal check:
curl -fsSL https://agentarmorhq.com/api/cli | node --input-type=module - check "xeroapi-xero-mcp-server"- Compare @xeroapi/xero-mcp-server →
- Add to a team allowlist
- Claude and terminal guide →
- Download the PDF guide
Share with your security lead
Need sign-off to use @xeroapi/xero-mcp-server? Copy this note for Slack, a ticket or a pull request.
### AgentArmorHQ Security Review Memo: @xeroapi/xero-mcp-server
- **Listing URL:** https://agentarmorhq.com/skills/xeroapi-xero-mcp-server
- **Type:** App connector
- **Risk Grade:** Grade B (Some risk signals)
- **Outside Security Advisories on File:** 0
#### Permission & Blast-Radius Signals
- **Local files:** No local folder access noted
- **Command execution:** No shell command runner noted
- **Network reach:** Local or standard API calls
- **Credentials:** Requires API key or token
- **Package source:** npm (@xeroapi/xero-mcp-server)
#### Recommended Hardened Setup
- **Command:** `npx -y --ignore-scripts @xeroapi/xero-mcp-server`
- **Controls:** Pin an exact version in `.mcp.json`, scope access to a single workspace folder, and use a least-privilege read-only token where supported.
_Based on public adoption and transparency signals as of Oct 23, 2026. Our opinion, not a code audit or security guarantee._Key facts
- Type
- App connector
- Install command
- npm install @xeroapi/xero-mcp-server
- Est. context load
- ~1k tokens / turn (~6 tool schemas, 0.5% of 200k context)
- Popularity
- 64.3k weekly npm downloads
- Last updated
- 2026-10-29
- Last graded
- 2026-10-24
Community
Discussions for @xeroapi/xero-mcp-server
Ask questions or share configuration tips. Governed by our Community Rules & Terms.
No posts match this filter yet.
Be the first to ask a question or share a working tip.
Check before you install, in Claude
Your assistant answers Block, Review or No known issues for any package before it installs it.
Get this check inside Claude